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CLAIMS: 

1 1 . A method for directing packets from a first network to a second 

2 network, packets of said first network following a predetermined protocol 

3 employing global addressing, packets of said first network having a source 

4 identification code, a destination code, and a service code, said second network 

5 offering the benefit of one of a plurality of service classes, the method 

6 comprising the steps of: 

7 extracting the source identification code and the service code from 

8 packets of the first network; 

5 9 using the source identification code to lookup a corresponding code 

ml 0 indicating permission with respect to the service classes; and 

ffp 1 issuing packets onto the second network with the benefit of a permissible 

•rjl 2 one of the service classes, the permissible one of the service classes being 

Nil 3 allocated consistent with the service code if the service code is consistent with 

rf4 the corresponding code. 

p, 1 2 - Method in accordance with claim 1 employing a host and comprising 

M= 2 the step of: 

3 using the host to originate at least some of the packets and to set the 

4 source identification code, the destination code, and the service code for the 

5 packets produced by the host; and 

6 sending the packets from the host on at least one hop based on the 

7 destination code. 

1 3. Method in accordance with claim 2 wherein packets produced by the 

2 host are produced by software giving a user the ability to select the service 

3 code. 
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4. Method in accordance with claim 2 wherein packets produced by the 
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host are produced by software without the intervention of hardware dedicated 
to setting the service code. 



1 5. Method in accordance with claim 2 wherein packets sent from the 

2 host make a plurality of hops with only once having the step performed of using 

3 the source identification code to lookup a corresponding code. 

1 6. Method in accordance with claim 2 wherein packets sent from the 

2 host make a plurality of hops and arrive at a destination with only once having 

3 the step performed of using the source identification code to lookup a 
was? 4 corresponding code. 

m 1 7 - Method in accordance with claim 2 wherein packets sent from the 

^ 2 host make a plurality of hops before the step of using the source identification 

SI 3 code to lookup a corresponding code. 

fij 1 8. Method in accordance with claim 1 employing an edge router for 

2 transferring packets to the second network, said second network being adapted 

H 3 to offer different types of quality of service, the step of issuing packets with 

4 the benefit of a permissible one of the service classes being performed at the 

5 edge router. 

1 9. Method in accordance with claim 8 wherein the second network 

2 operates under one of the ATM, MPLS, IP TOS, and Diffserv standards. 

1 10. Method in accordance with claim 1 comprising the steps of: 

2 extracting the destination code from packets of the first network; and 

3 using the destination code to lookup a corresponding code indicating 

4 permission with respect to the service classes. 
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1 1 . Method in accordance with claim 1 0 wherein the step of using the 
destination code is conducted to establish a permission code independently of 
the source code. 

12. Method in accordance with claim 10 wherein the step of using the 
destination code is conducted if the service code signifies the destination code 
is applicable. 

13. Method in accordance with claim 1 employing a host and gateway, 
comprising the steps of: 

using the host to originate at least some of the packets and to set the 
source identification code and the destination code; 

using the gateway to set the service code for packets produced by the 
host; and 

sending packets reaching the gateway from the host on at least one hop 
based on the destination code before the step of using the source identification 
code to lookup a corresponding code. 

14. Method in accordance with claim 13 wherein the step of using the 
gateway to set the service code is performed by examining one or more of the 
destination code, the source code, or information carried by the packet 
indicating the type of data in the packet. 

15. Method in accordance with claim 1 wherein the step of issuing 
packets with the benefit of a permissible one of the service classes is performed 
by allocating a defaulting one of the service classes if the service code is 
inconsistent with the corresponding code. 

1 6. Method in accordance with claim 1 wherein the source identification 
code, the destination code, and the service code are located in a header defined 
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3 by the predetermined protocol, said predetermined protocol operating at a 

4 network layer. 

1 17. Method in accordance with claim 16 wherein the step of issuing 

2 packets with the benefit of a permissible one of the service classes is performed 

3 without reference to a layer above the network layer. 

1 1 8. Method in accordance with claim 1 wherein the source identification 

2 code is one of a plurality of source identification codes, and wherein the 

3 corresponding code is one of a plurality of corresponding codes, the method 
^ 4 comprising the steps of: 

s.S'1 

p 5 correlating the source identification codes with the corresponding codes 

Co 6 and storing this correlation as entries in a service table, the step of issuing 

J: 7 packets with the benefit of a permissible one of the service classes being 

8 performed by looking up the corresponding code in the service table by using 

p 9 the source identification code. 

19. Method in accordance with claim 1 8 wherein some of the entries in 

H 3 2 the service table are indexed by a prefix of the source identification code in 

3 order to indicate that all codes having the prefix have the same correlation to 

4 the corresponding codes. 



1 20. Method in accordance with claim 1 9 wherein the step of issuing 

2 packets with the benefit of a permissible one of the service classes is performed 

3 by looking up the corresponding code in the service table by referring to the 

4 longest one of the prefixes that matches the source identification code. 
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21. Method in accordance with claim 19 employing an application 
specific integrated circuit for performing lookups on the service table, the step 
of issuing packets with the benefit of a permissible one of the service classes 
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4 being performed by looking up the corresponding code in the service table by 

5 referring to the longest one of the prefixes that matches the source 

6 identification code. 

1 22. Method in accordance with claim 1 8 wherein each of the permission 

2 codes signify one or more of the service classes, so that authorization may be 

3 given for an individual one of the source identification codes to operate on one 

4 or another of the service classes. 

1 23. Method in accordance with claim 1 wherein the predetermined proto- 

% 2 col is the Internet Protocol and the service code is stored in a header in the 

S 3 Type of Service field. 

: s'k 

jfTs 

51 1 24. Method in accordance with claim 1 wherein the predetermined 

^ 2 protocol is the Internet Protocol and the service code is stored in a header in the 

0 3 IP Options field. 

25. Method in accordance with claim 1 wherein the service code is 

^2 encoded to signify a requested quality of service with respect to one or more 

3 of bandwidth, latency, jitter, reliability, and security. 

1 26. Method in accordance with claim 1 wherein the service code is 

2 encoded to signify membership in a group entitled to a predetermined quality of 

3 service. 

1 27. Method in accordance with claim 1 wherein the service code is 

2 encoded to signify a user application requiring a corresponding quality of ser- 

3 vice. 



1 



28. Method in accordance with claim 1 wherein the second network is 
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a backbone, the service code being encoded to signify a request to enter the 
backbone. 



1 29. Method in accordance with claim 28 wherein the service code 

2 includes information on a requested channel within the backbone. 

1 30. Method in accordance with claim 1 employing a plurality of access 

2 nodes of one or more backbones, the service code being interpreted to signify 

3 a selection of one of the access nodes. 

y 1 31 . Method in accordance with claim 1 comprising the step of: 

CO 2 calculating a usage charge by measuring the amount of usage of the step 

fir? 

S| 3 of issuing packets with the benefit of a permissible one of the service classes. 

Ill 

^ 1 32. Apparatus for directing packets from a first network to a second 

0 2 network, packets of said first network following a predetermined protocol 

ol 

Hj3 employing global addressing, packets of said first network having a source 

%l 4 identification code, a destination code, and a service code, said second network 

^ 5 offering the benefit of one of a plurality of service classes, the apparatus 

6 comprising: 

7 an input device adapted to be coupled to said first network for extracting 

8 from packets the source identification code and the service code; 

9 a table coupled to said input device for using the source identification 

10 code to lookup a corresponding code indicating permission with respect to the 

11 service classes, a permissible one of the service classes being allocated 

12 consistent with the service code if the service code is consistent with the 

1 3 corresponding code; and 

14 an output device adapted to be coupled to said second network, said 

1 5 output device being in communication with said input device for issuing packets 

1 6 with the benefit of the permissible one of the service classes. 
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1 33. Apparatus in accordance with claim 32 wherein the output device is 

2 at the edge of the second network, said second network being adapted to offer 

3 different types of quality of service, the output device being operable to route 

4 packets to the second network with the benefit of one of the service classes. 

1 34. Apparatus in accordance with claim 33 wherein the output device 

2 produces an output under one of the ATM, MPLS, Diffserv, and IP TOS, 

3 standards. 

S 4 35. Apparatus in accordance with claim 32 wherein the output device 

2 5 issues packets with the benefit of a defaulting one of the service classes if the 

03 6 service code is inconsistent with the corresponding code. 

iy 

1 36. Apparatus in accordance with claim 32 wherein the source identif ica- 

2 2 tion code, the destination code, and the service code are located in a header 

ftl 3 defined by the predetermined protocol, said predetermined protocol operating 

p 4 at a network layer, the apparatus being operable to allocate service classes by 

" 5 obtaining information from the network layer. 

1 37. Apparatus in accordance with claim 36 wherein the apparatus is 

2 operable to issue packets from the output device without reference to a layer 

3 above the network layer. 

1 38. Apparatus in accordance with claim 32 wherein the source 

2 identification code is one of a plurality of source identification codes, and 

3 wherein the corresponding code is one of a plurality of corresponding codes, the 

4 apparatus comprising: 

5 a service table, the apparatus being operable to (a) correlate the source 

6 identification codes with the corresponding codes and store this correlation as 
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7 entries in the service table, and (b) lookup the corresponding code in the service 

8 table by using the source identification code. 

1 39. Apparatus in accordance with claim 38 wherein some of the entries 

2 in the service table are indexed by a prefix of the source identification code in 

3 order to indicate that all codes having the prefix have the same correlation to 

4 the corresponding codes. 

1 40. Apparatus in accordance with claim 39 and operable to lookup the 

2 corresponding code in the service table by referring to the longest one of the 
^ 3 prefixes that matches the source identification code. 

il 1 41 . Apparatus in accordance with claim 39 comprising: 

Sj 2 an application specific integrated circuit for looking up the corresponding 

J 3 code in the service table by referring to the longest one of the prefixes that 

04 matches the source identification code. 

ri1 42. Apparatus in accordance with claim 38 wherein each of the 

r 2 corresponding codes signify one or more of the service classes, so that 

3 authorization may be given for an individual one of the source identification 

4 codes to operate on one or another of the service classes. 

1 43. Apparatus in accordance with claim 32 wherein the input device is 

2 operable with the predetermined protocol being the Internet Protocol and with 

3 the service code being stored in a header in the Type of Service field. 

1 44. Apparatus in accordance with claim 32 wherein the input device is 

2 operable with the predetermined protocol being the Internet Protocol and the 

3 service code being stored in a header in the IP Options field. 



33 

1 45. Apparatus in accordance with claim 32 wherein the apparatus is 

2 operable to respond to the service code by acting to arrange a predetermined 

3 quality of service with respect to one or more of bandwidth, latency, jitter, 

4 reliability, and security. 

1 46. Apparatus in accordance with claim 32 wherein the service code may 

2 be encoded to signify membership in a group entitled to a predetermined quality 

3 of service, the apparatus being operable to arrange the predetermined quality 

4 of service in response to the service code being encoded to signify membership 

5 in the group. 

5 1 47. Apparatus in accordance with claim 32 wherein the service code may 

m 2 be encoded to signify a user application requiring a corresponding quality of 

3 service, the apparatus being operable to arrange the corresponding quality of 

^4 service in response to the service code being encoded to signify the user 

05 application. 

?4 1 48. Apparatus in accordance with claim 29 wherein said second network 

**2 is a backbone, the apparatus being operable to arrange for entry to the 

3 backbone in response to the service code being encoded to signify a request to 

4 enter the backbone. 

1 49. Apparatus in accordance with claim 48 wherein the apparatus is 

2 operable to arrange for entry on a selected channel of the backbone in response 

3 to the service code being encoded to signify a request for the selected channel 

4 within the backbone. 
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50. Apparatus in accordance with claim 32 and adapted to couple to a 
plurality of access nodes of one or more backbones, the apparatus being 
operable to arrange for entry at a selected one of the access nodes of one of 
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the backbones in response to the service code being encoded to signify a 
request for the selected one of the access nodes. 



1 51 . Apparatus in accordance with claim 32 comprising: 

2 means for calculating a usage charge by measuring the amount of usage 

3 under the source identification code. 

1 52. Apparatus in accordance with claim 32 wherein the input device has 

2 a plurality of input ports and wherein the output device has a plurality of output 

3 ports, the apparatus comprising: 

J 4 a switching fabric coupled between said input device and said output 

W 5 device for directing packets from selected ones of said input ports to selected 

01 6 ones of said output ports; and 

ry 7 a processor coupled to said input device and said output device for 

j 8 updating a routing table indicating how packets are to be routed between the 

O 9 input ports and the output ports. 

ff'i 

p 1 53 - Apparatus for directing packets from a first network to a second 

^2 network, packets of said first network following a predetermined protocol 

3 employing global addressing, packets of said first network having a source 

4 identification code, a destination code, and a service code, said second network 

5 offering the benefit of one of a plurality of service classes, the apparatus 

6 comprising: 

7 a host for (a) originating at least some of the packets and setting the 

8 source identification code, the destination code, and the service code for the 

9 packets, and (b) sending the packets from the host on at least one hop over the 

1 0 first network consistent with the destination code; and 

1 1 an edge router for receiving packets over the first network from the host 

1 2 and for transferring the packets to the second network using different ones of 

1 3 the service classes, the edge router comprising: 
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14 an input device adapted to be connected to the first network for 

1 5 extracting from packets the source identification code and the service code; 

16 a table coupled to said input device for using the source identification 

1 7 code to lookup a corresponding code indicating permission with respect to the 

18 service classes, a permissible one of the service classes being allocated 

19 consistent with the service code if the service code is consistent with the 

20 corresponding code; and 

21 an output device adapted to be connected to the second network, said 

22 output device being in communication with said input device for sending 

23 packets onto the second network with the benefit of the permissible one of the 
service classes. 

fill 1 54. Apparatus in accordance with claim 53 wherein packets produced by 

^ 2 the host are produced by software giving a user the ability to select the service 

^ J 3 code. 

fU 1 55. Apparatus in accordance with claim 53 wherein packets produced by 

JLjj2 the host are produced by software without the intervention of hardware 

^3 dedicated to setting the service code. 

1 56. Apparatus for directing packets from a first network to a second 

2 network, packets of said first network following a predetermined protocol 

3 employing global addressing, packets of said first network having a source 

4 identification code, a destination code, and a service code, said second network 

5 offering the benefit of one of a plurality of service classes, the apparatus 

6 comprising: 

7 a host for (a) originating at least some of the packets and setting the 

8 source identification code and the destination code for the packets, and (b) 

9 sending the packets from the host on at least one hop over the first network 
1 0 consistent with the destination code; and 
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1 1 a gateway coupled to the host over the first network for (a) setting the 

1 2 service code for the packets produced by the host, and (b) sending the packets 

1 3 reaching the gateway from the host on at least one hop over the first network 

14 consistent with the destination code; and 

15 an edge router coupled to said gateway over said first network for 

16 transferring packets to the second network, the edge router comprising: 

1 7 an input device adapted to be coupled to said first network for extracting 

1 8 from packets the source identification code and the service code; 

1 9 a table coupled to said input device for using the source identification 

20 code to lookup a corresponding code indicating permission with respect to the 
yh service classes, a permissible one of the service classes being allocated 

consistent with the service code if the service code is consistent with the 

03 corresponding code; and 

r3 4 an output device adapted to be coupled to said second network, said 

"25 output device being in communication with said input device for issuing packets 

€26 with the benefit of the permissible one of the service classes. 

p|1 57. Apparatus in accordance with claim 56 wherein the gateway is 

^■2 operable to examine one or more of the destination code, the source code, or 

3 information carried by the packets indicating the type of data in the packet. 

1 58. Apparatus for directing from a first network packets following a 

2 predetermined protocol employing global addressing, packets of said first 

3 network having a source identification code, a destination code, and a service 

4 code, the apparatus comprising: 

5 a second network offering the benefit of one or more service classes; 

6 an edge router for transferring packets to the second network using 

7 different ones of the service classes, the edge router comprising: 

8 an input device adapted to be connected to the first network for 

9 extracting from packets the source identification code and the service code; 
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1 0 a table coupled to said input device for using the source identification 

1 1 code to lookup a corresponding code indicating permission with respect to the 

12 service classes, a permissible one of the service classes being allocated 

13 consistent with the service code if the service code is consistent with the 

14 corresponding code; and 

1 5 an output device adapted to be connected to the second network, said 

16 output device being in communication with said input device for sending 

1 7 packets onto the second network with the benefit of the permissible one of the 

18 service classes. 

1 59. A method for directing packets from a first network to a second 

0j2 network, packets of said first network following a predetermined protocol 

m 3 employing global addressing, packets of said first network having a source 

4 identification code, a destination code, and a service code, said second network 

^ 5 offering the benefit of one of a plurality of service classes, the method 

O 6 comprising the steps of: 

f|| 7 extracting the destination code and the service code from packets of the 

p;J 8 first network; 

^ 9 using the destination code to lookup a corresponding code indicating 

10 permission with respect to the service classes; and 

1 1 issuing packets onto the second network with the benefit of a permissible 

1 2 one of the service classes, the permissible one of the service classes being 

1 3 allocated consistent with the service code if the service code is consistent with 

14 the corresponding code. 

1 60. Method in accordance with claim 59 wherein the step of using the 

2 destination code is conducted to establish a permission code independently of 

3 the source code. 
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61 . Method in accordance with claim 59 wherein the step of using the 
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destination code is conducted if the service code signifies the destination code 
is applicable. 
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